ICSA-13-233-01

icsaUScisa_csaf_ot

Siemens COMOS Privilege Escalation Vulnerability

view advisory published 2013-05-24

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2013-4943UShigh7.2—
The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationCOMOS

    Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)

  • MitigationCOMOS 10.0

    Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)

  • MitigationCOMOS 9.1

    Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)

  • MitigationCOMOS 9.2

    Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan